Sign In
golang
/
flannel
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

Added a hint for firewall rules

readme: added a hint for firewall rules in backend documentation (IPsec backend)

Could help users to use this backend without problems.
seb-kw 4 years ago
parent
485649719b
commit
9374813d17
1 changed files with 3 additions and 0 deletions
Unified View Show Diff Stats
  1. 3 0
      Documentation/backends.md

+ 3 - 0
Documentation/backends.md
View File 

@@ -135,6 +135,9 @@ Type:
 
 * `UDPEncap` (Boolean): Optional, defaults to false. Forces the use UDP encapsulation of packets which can help with some NAT gateways.
 
 * `UDPEncap` (Boolean): Optional, defaults to false. Forces the use UDP encapsulation of packets which can help with some NAT gateways.
 
 * `ESPProposal` (string): Optional, defaults to `aes128gcm16-sha256-prfsha256-ecp256`. Change this string to choose another ESP Proposal.
 
 * `ESPProposal` (string): Optional, defaults to `aes128gcm16-sha256-prfsha256-ecp256`. Change this string to choose another ESP Proposal.
 
 
 
+Hint: 
+Add rules to your firewall: Open ports 50 (for ESP protocol), UDP 500 (for IKE, to manage encryption keys) and UDP 4500 (for IPSEC NAT-Traversal mode).
 
+
 
 #### Troubleshooting
 
 #### Troubleshooting
 
 Logging
 
 Logging
 
 * When flannel is run from a container, the Strongswan tools are installed. `swanctl` can be used for interacting with the charon and it provides a logs command.. 
 * When flannel is run from a container, the Strongswan tools are installed. `swanctl` can be used for interacting with the charon and it provides a logs command..